02393235cca865340cc418fb70e82332 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02393235cca865340cc418fb70e82332
Size

96KB
MD5

02393235cca865340cc418fb70e82332
SHA1

e2d96ba658988ed1bb76494012944d6db726d2c4
SHA256

667e0a3b853f56f119d5cee666f81ee2b01000a9ea91d88499fe6487b02c66f3
SHA512

c8270adc68c34d81492ab5e1799e097ed815eb4af36c79bbf90e1f3cb8d5cf1168b6e614f85e8224c38ae095c31f445171496ab7b2f3f6aec7ab6d98f83e5575
SSDEEP

1536:OhUYd4hXKeuMqmL4xC0JvjJ/wP17y4kwVTXZOM9E5kvCNy1j1bkO4QfFq0/BTrN5:Oj4hawqmLqCSjRwtW4k8TXZOM9E56CNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02393235cca865340cc418fb70e82332

Files

02393235cca865340cc418fb70e82332
.exe windows:4 windows x86 arch:x86

14546693be9d28fe651908fca7286b40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ReadFile
CreateProcessA
MultiByteToWideChar
IsBadReadPtr
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
GetWindowsDirectoryA
SetFilePointer

ole32

OleCreate

user32

GetSystemMetrics
GetWindowLongA
DispatchMessageA
GetMessageA
DestroyWindow
TranslateMessage
DefWindowProcA
MessageBoxA
PostQuitMessage

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ